<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
It is up to you to require authentication for any of SIP requests
processed by Kamailio.<br>
<br>
To be able to asist further why a call is not authenticated or how
to add authentication for it, you have to provide the authentication
part of your config (perhaps the route[AUTH]) and a ngrep output for
the INVITE you want to authenticate.<br>
<br>
If you based your config on the default one, could be that the call
is using a From domain that doesn't match myself -- this is just a
blind guess.<br>
<br>
Cheers,<br>
Daniel<br>
<br>
<div class="moz-cite-prefix">On 31/08/15 22:12, Al S wrote:<br>
</div>
<blockquote cite="mid:BAY177-W185ECCCB52D6EFAD9DE90CD46B0@phx.gbl"
type="cite">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr"><font color="#000000" face="Verdana,sans-serif">No
all clients from PBX are trusted to make call out though.<br
id="FontBreak">
</font><br>
<br>
<div>
<hr id="stopSpelling">From: <a class="moz-txt-link-abbreviated" href="mailto:568691@gmail.com">568691@gmail.com</a><br>
Date: Mon, 31 Aug 2015 23:04:10 +0300<br>
To: <a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
Subject: Re: [SR-Users] authorize a client in bulk
registration<br>
<br>
<div dir="ltr">
<div>If it is OK to trust all clients from PBX - just add a
check in route[AUTH] if traffic comes from PBX and execute
return; if TRUE<br>
</div>
Else, you may create a list of allowed users in db/config
and perform checks based on $au<br>
</div>
<div class="ecxgmail_extra"><br>
<div class="ecxgmail_quote">2015-08-31 20:49 GMT+03:00 Al S
<span dir="ltr"><<a moz-do-not-send="true"
href="mailto:alirsm@outlook.com" target="_blank">alirsm@outlook.com</a>></span>:<br>
<blockquote class="ecxgmail_quote" style="border-left:1px
#ccc solid;padding-left:1ex;">
<div>
<div dir="ltr"><font
style="font-size:15px;background-color:rgb(255,255,255);"
color="#000000" face="Verdana,sans-serif">My PBX
registered in bulk to Kamailio successfully.</font>
<div
style="line-height:21.2999992370605px;color:rgb(68,68,68);font-size:15px;background-color:rgb(255,255,255);"><span
style="line-height:22.7199993133545px;font-family:Verdana,sans-serif;font-size:12pt;"><br
style="line-height:22.7199993133545px;">
</span></div>
<div style="background-color:rgb(255,255,255);"><span
style="color:rgb(68,68,68);font-size:12pt;line-height:22.7199993133545px;font-family:Verdana,sans-serif;">PBX
--> Register --> kamailio</span>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><font
style="line-height:normal;" color="#000000"
face="Verdana,sans-serif">PBX <-- 401 with
nonce value <-- kamailio</font></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><font
style="line-height:normal;" color="#000000"
face="Verdana,sans-serif">PBX --> Register
with nonce and md5 response values -->
kamailio</font></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;">
<div style="line-height:21.2999992370605px;"><font
style="line-height:normal;" color="#000000"
face="Verdana,sans-serif">BOX <-- 200ok
<-- kamailio</font></div>
</div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><font
style="line-height:normal;" color="#000000"
face="Verdana,sans-serif"><br
style="line-height:21.2999992370605px;">
</font></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><font
style="line-height:normal;" color="#000000"
face="Verdana,sans-serif">However, when one of
the PBX client sends an invite out, kamailio
AUTH module does not authorize this client:</font></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><font
style="line-height:normal;" color="#000000"
face="Verdana,sans-serif"><br
style="line-height:21.2999992370605px;">
</font></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><span
style="line-height:22.7199993133545px;font-family:Verdana,sans-serif;font-size:12pt;">client
(813-111-1111) --> Invite --> kamailio</span></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;">
<div style="line-height:21.2999992370605px;"><br>
</div>
</div>
<div><font face="Verdana, sans-serif"><font
color="#444444"><span
style="font-size:15px;">What would be the
right way to authorize a 10-digit client
to send a call out when a
bulk registration and not 10-digit
registration is performed. </span></font></font></div>
<div><font face="Verdana, sans-serif"><font
color="#444444"><span
style="font-size:15px;"><br>
</span></font></font></div>
<div><font color="#444444" face="Verdana,
sans-serif"><span style="font-size:15px;">Your
assistance in this matter is greatly
appreciated</span></font></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><font
style="line-height:normal;" face="Verdana,
sans-serif"><br
style="line-height:21.2999992370605px;">
</font></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><font
style="line-height:normal;" face="Verdana,
sans-serif">Thanks,</font></div>
<div
style="color:rgb(68,68,68);font-size:15px;line-height:21.2999992370605px;"><font
style="line-height:normal;" face="Verdana,
sans-serif">Al</font></div>
</div>
</div>
</div>
<br>
_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) -
sr-users mailing list<br>
<a moz-do-not-send="true"
href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
<a moz-do-not-send="true"
href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<div class="ecxgmail_signature">
<div dir="ltr">Alexandru Covalschi<br>
ABRISS-Solutions
<div>VoIP engineer and system administrator<br>
phone: +37367398493<br>
web: <a moz-do-not-send="true"
href="http://abs-telecom.com/" target="_blank">http://abs-telecom.com/</a></div>
</div>
</div>
</div>
<br>
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a>
<a class="moz-txt-link-freetext" href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a></div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a>
<a class="moz-txt-link-freetext" href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla
<a class="moz-txt-link-freetext" href="http://twitter.com/#!/miconda">http://twitter.com/#!/miconda</a> - <a class="moz-txt-link-freetext" href="http://www.linkedin.com/in/miconda">http://www.linkedin.com/in/miconda</a>
Book: SIP Routing With Kamailio - <a class="moz-txt-link-freetext" href="http://www.asipto.com">http://www.asipto.com</a></pre>
</body>
</html>